Approved changes feed: RSS · Atom
cpe:2.3:a:lz4_project:lz4:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Lz4 Project (aeec4d92-e597-5506-9807-0c78bd82bce6) |
|---|---|
| Product | Lz4 (a2ba9ad3-ee99-5b42-b452-61a02ae3eaa2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/lz4 |
purl2cpe | 2026-06-01 10:12:18.663730 |
pkg:deb/ubuntu/lz4 |
purl2cpe | 2026-06-01 10:12:18.663734 |
pkg:github/lz4/lz4 |
purl2cpe | 2026-06-01 10:12:18.663736 |
pkg:nuget/lz4 |
purl2cpe | 2026-06-01 10:12:18.663739 |
pkg:rpm/centos/lz4 |
purl2cpe | 2026-06-01 10:12:18.663742 |
pkg:rpm/fedora/lz4 |
purl2cpe | 2026-06-01 10:12:18.663745 |
pkg:rpm/opensuse/lz4 |
purl2cpe | 2026-06-01 10:12:18.663747 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-3520 |
vulnerable | 2026-06-08 05:33:52.703810 |
Details available
There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove() on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability, with some potential impact to confidentiality and integrity as well.
Published: 2021-06-02T12:32:32.000Z
Updated: 2026-10-14T09:49:43.089Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17543 |
vulnerable | 2026-06-08 05:13:10.634404 |
Details available
LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fast with a large input. (This issue can also lead to data corruption.) NOTE: the vendor states "only a few specific / uncommon usages of the API are at risk."
Published: 2019-10-14T01:09:00.000Z
Updated: 2026-10-14T06:54:46.324Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.